2024-08-29_5d168f0dc86c8a51fb02a911ae54cfa5_cryptolocker | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-29_5d168f0dc86c8a51fb02a911ae54cfa5_cryptolocker
Size

64KB
MD5

5d168f0dc86c8a51fb02a911ae54cfa5
SHA1

9dcbf56b15100777f6d32a87afdb5a597e916b9f
SHA256

300bfd671710ad201a71e966dfec70f8f5315d79f92145e623643ed12d7a94e7
SHA512

10f03a93cde39cdfddf586841b6d94ad925bbad7ae7f4930c627c50fcf7f0f15091ed44ca70d3599d97e45536006a353aae162a8f3180faf5a11c20880592257
SSDEEP

1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUHOP:btng54SMLr+/AO/kIhfoKMHd9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-29_5d168f0dc86c8a51fb02a911ae54cfa5_cryptolocker

Files

2024-08-29_5d168f0dc86c8a51fb02a911ae54cfa5_cryptolocker
.exe windows:5 windows x86 arch:x86

a2bfa209044e11b72a41f731968fdff2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
PostQuitMessage
ShowWindow
UpdateWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
GetMessageA
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcessId
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ